Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
File:                     NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft (raw, json)
Hash identifier:          Go31bMyOUSF0pWvbzv2xKmy9zVn3gXsOsObje4IlGtE=
Subject key identifier:   D9:D0:04:C2:94:2F:1C:A9:9B:ED:86:FF:5B:DD:05:B9:A8:04:32:AA
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Certificate issuer:       /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial:       01962F0694BD06B6993416AA6D1946C73DEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
Manifest number:          098D
Signing time:             Sun 13 Apr 2025 12:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:22 +0000
Files and hashes:         1: 908CjJVwEzY-Q7rq5gWYan6FK7A.roa (hash: r+dWqc5p2uQvaR0hp/ydgSShtCb659XbXMV6CSkrEdU=)
                          2: NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl (hash: Svh28fzlzwduv2sMSnjRQvwMElpHU3a+NqWZOdWAmyc=)
                          3: fDsdK2tD77O7e4AR_nokgS7lFto.roa (hash: 29a/vkXJaunGUFq80jkR7W5FhU3JI/W9/SFVMkWYH+c=)
                          4: pAzvrIoWwcHpcNO5iNiHfwLiAJA.roa (hash: DLnt9qWRp3EI4stZNmwt/HobGa97g3RTR8iRLREX4YA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:94:bd:06:b6:99:34:16:aa:6d:19:46:c7:3d:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
        Validity
            Not Before: Apr 13 12:01:22 2025 GMT
            Not After : Apr 14 12:01:22 2025 GMT
        Subject: CN=d9d004c2942f1ca99bed86ff5bdd05b9a80432aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:63:cf:fc:48:d7:85:be:27:1b:9c:2a:a2:6b:
                    bd:60:0a:17:83:f6:8a:be:30:0e:ed:af:c4:04:45:
                    e0:d5:71:25:ba:e7:8c:d2:0d:91:b0:eb:90:42:21:
                    f1:57:bc:b4:0c:db:08:1a:82:be:2a:46:e8:96:be:
                    7f:71:cd:d8:76:e3:cd:9b:64:12:b3:d9:21:d6:dc:
                    ab:23:ea:d5:52:1a:5e:34:3e:dd:be:06:e8:e5:14:
                    7a:f3:72:32:78:dc:56:bf:87:47:87:47:fd:63:ab:
                    81:68:85:1f:48:d9:e9:40:2a:c6:f5:35:91:96:2e:
                    2a:f3:7a:d2:84:de:10:99:b6:bf:15:15:0b:5d:59:
                    ce:ca:49:1a:66:25:57:bd:1f:01:ae:90:e4:6d:91:
                    8d:f5:2d:49:15:51:30:2b:e1:37:24:5d:5d:d1:e8:
                    a0:eb:11:c9:d1:8a:74:09:bd:30:b3:91:df:2b:81:
                    22:8d:71:4d:4e:96:b3:ed:4c:0b:4b:5b:3c:43:94:
                    32:2b:c9:e0:2c:2c:d4:cc:a3:9c:c4:28:c8:27:b5:
                    02:bf:1f:94:5f:32:de:49:56:05:f9:9a:6c:b2:ff:
                    88:9a:d5:f1:e7:76:bf:5e:13:87:97:55:15:4b:c6:
                    a1:d8:73:4e:70:d2:64:85:5c:b6:61:8a:2a:7c:c2:
                    32:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D0:04:C2:94:2F:1C:A9:9B:ED:86:FF:5B:DD:05:B9:A8:04:32:AA
            X509v3 Authority Key Identifier:
                keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:01:d7:71:ca:aa:3e:33:96:67:d9:f3:05:8f:6a:bc:30:40:
         9b:77:72:6d:62:a8:1b:2d:43:be:df:e8:99:b9:a1:cd:74:02:
         d2:60:4e:5f:00:bc:57:df:2d:33:ab:21:8b:9f:28:1c:ad:5c:
         3d:9e:80:74:f2:fb:81:f3:25:f6:94:d0:82:53:f5:e3:92:16:
         a4:3f:26:99:d2:93:46:24:bd:be:19:e6:3a:34:d6:74:63:6a:
         ef:2f:ea:8c:4f:dc:9f:23:d4:14:b4:f0:77:e1:d8:27:95:cc:
         32:28:2c:36:64:51:ef:26:c1:03:19:8a:92:06:65:3d:5c:e3:
         f6:93:88:1c:e0:d6:01:3d:82:98:b0:85:5b:18:e9:22:d0:1f:
         78:88:c2:e2:f5:a4:df:2c:57:f0:d7:12:25:7d:04:85:6d:86:
         d1:64:5b:e2:ac:fb:26:79:21:d4:f4:20:d0:f5:c1:b9:6d:ae:
         43:cc:34:2d:84:2d:0d:7c:43:23:62:b5:a0:c0:fc:5d:f0:ab:
         44:78:bd:3e:d2:33:5d:82:e6:bd:e7:97:4a:56:65:26:6d:96:
         9e:57:1b:28:6b:61:04:c4:5b:53:9c:81:40:53:5a:16:fd:16:
         12:8c:be:ab:ac:f1:b6:92:35:31:7e:13:86:df:dc:0e:f2:d7:
         64:94:f1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----